Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. 2020/07/18 22:13:36 parsed 1 programs syzkaller login: [ 101.531655][ T3650] kmemleak: Automatic memory scanning thread ended 2020/07/18 22:13:44 executed programs: 0 [ 108.939836][ T25] audit: type=1400 audit(1595110424.175:8): avc: denied { execmem } for pid=6466 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 108.952531][ T6467] IPVS: ftp: loaded support on port[0] = 21 [ 108.985854][ T6467] chnl_net:caif_netlink_parms(): no params data found [ 109.041339][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.048409][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.055624][ T6467] device bridge_slave_0 entered promiscuous mode [ 109.063047][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.070848][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.078326][ T6467] device bridge_slave_1 entered promiscuous mode [ 109.088459][ T6467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.098183][ T6467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.110722][ T6467] team0: Port device team_slave_0 added [ 109.117000][ T6467] team0: Port device team_slave_1 added [ 109.125415][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.132723][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.158949][ T6467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.169995][ T6467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.177105][ T6467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.203198][ T6467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.237078][ T6467] device hsr_slave_0 entered promiscuous mode [ 109.296374][ T6467] device hsr_slave_1 entered promiscuous mode [ 109.356359][ T6467] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.387055][ T6467] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.467035][ T6467] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.497004][ T6467] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.570749][ T6467] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.577795][ T6467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.584979][ T6467] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.591987][ T6467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.608127][ T6467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.616512][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.623950][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.631534][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.639642][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 109.648273][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.656147][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.664248][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.671275][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.680021][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.688578][ T2484] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.695593][ T2484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.708691][ T6467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.719042][ T6467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.730364][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.738666][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.746917][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.754775][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.763152][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.770485][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.780512][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.788108][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.796870][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.807275][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.818918][ T6467] device veth0_vlan entered promiscuous mode [ 109.826261][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.834079][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.842131][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.850414][ T6467] device veth1_vlan entered promiscuous mode [ 109.860385][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.868313][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.875924][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.885047][ T6467] device veth0_macvtap entered promiscuous mode [ 109.892496][ T6467] device veth1_macvtap entered promiscuous mode [ 109.901823][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.909057][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.917775][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.926663][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.933936][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.977964][ T6690] ubi0: attaching mtd0 [ 109.982225][ T6690] ubi0: scanning is finished [ 109.987425][ T6690] ubi0: empty MTD device detected [ 110.026906][ T6690] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 110.034386][ T6690] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 110.041824][ T6690] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 110.048782][ T6690] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 110.056240][ T6690] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 110.062984][ T6690] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 110.071122][ T6690] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1886488603 [ 110.081239][ T6690] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 110.091266][ T6694] ubi0: background thread "ubi_bgt0d" started, PID 6694 2020/07/18 22:13:50 executed programs: 1 [ 115.717161][ T6700] ubi0: detaching mtd0 [ 115.721758][ T6700] ubi0: mtd0 is detached [ 115.726376][ T6700] ubi0: attaching mtd0 [ 115.730540][ T6700] ubi0: scanning is finished [ 115.787202][ T6700] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.794678][ T6700] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.802148][ T6700] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.809232][ T6700] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.816736][ T6700] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.823472][ T6700] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.831677][ T6700] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1886488603 [ 115.841878][ T6700] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.851950][ T6704] ubi0: background thread "ubi_bgt0d" started, PID 6704 [ 115.863118][ T6706] ubi0: detaching mtd0 [ 115.876081][ T6706] ubi0: mtd0 is detached [ 115.880477][ T6706] ubi0: attaching mtd0 [ 115.884718][ T6706] ubi0: scanning is finished [ 115.927306][ T6706] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.934777][ T6706] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.942425][ T6706] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.949568][ T6706] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.957102][ T6706] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.963837][ T6706] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.972288][ T6706] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1886488603 [ 115.982513][ T6706] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.992949][ T6711] ubi0: background thread "ubi_bgt0d" started, PID 6711 [ 119.155487][ T0] NOHZ: local_softirq_pending 08 [ 121.472744][ T6714] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888127c32800 (size 32): comm "syz-executor.0", pid 6690, jiffies 4294948267 (age 13.910s) hex dump (first 32 bytes): 00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de ........"....... 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ................ backtrace: [<00000000692a9f2c>] erase_aeb+0x25/0x110 [<00000000f5b2acc0>] ubi_wl_init+0x191/0x5c0 [<000000007bf77831>] ubi_attach+0x63b/0x1879 [<0000000027f46cdc>] ubi_attach_mtd_dev+0x65c/0xd30 [<00000000e9177040>] ctrl_cdev_ioctl+0x144/0x1b0 [<000000004147b473>] ksys_ioctl+0xa6/0xd0 [<000000003eb9a4f4>] __x64_sys_ioctl+0x1a/0x20 [<00000000a86b191d>] do_syscall_64+0x4c/0xe0 [<00000000dd8051e1>] entry_SYSCALL_64_after_hwframe+0x44/0xa9